search

connectbot / connectbot

ConnectBot is the first SSH client for Android.
https://connectbot.org
Apache License 2.0
2.48k stars 628 forks source link

How did you explain some comment ? #1412

Open Gadgetroch opened 3 months ago

Gadgetroch commented 3 months ago

Hi,

On play store, some people have said, I quote:

The passwords of my devices used with this application changed on their own and became inaccessible. Devices that I did not control by this application remained accessible. I can't prove anything but I uninstalled this app then reinstalled all my corrupted devices after completely formatting. Now I'm going to try SSH on Termux available in the F-droid store. Ultimately, I have much less empathy for the Android system. Trojans?

How do you explain that? This is a comment that has been liked about 75 times.

I'm just worried but your app seems the best

Thank's

kruton commented 3 months ago

I couldn't find that comment on Play Store to reply.

Connectbot is built from the source you see here and the binary is built on GitHub infrastructure. Anyone can download the .APK from F-Droid or here to verify that. I don't know how more transparent one could get.

It sounds like the user has other problems that are unrelated entirely to Connectbot, but they also haven't preserved any data for it to be forensically investigated. That's a shame as it would show Connectbot is not responsible for their issues, perceived or real.

Gadgetroch commented 3 months ago

It's a french comment, i have translated it.

If you want the french comment, it's this : Les mots de passe de mes appareils utilisés avec cette application ont changé tout seul et sont devenus inaccessibles. Les appareils que je n'ai pas contrôlé par cette application sont restés accessibles. Je ne peux rien prouver mais j'ai désinstallé cette application puis j'ai réinstallé tous mes appareils corrompus après formatage complet. Maintenant je vais tenter le SSH sur Termux disponible dans le magasin F-droid. Finalement, j'ai beaucoup moins d'empathie pour le système Android. Troyens?

Thank's for your response.

Gadgetroch commented 3 months ago

Hi.

Did you see this comment : December 28, 2019 Was a good app but last update added a security/trust issue which could expose a passphrase in plain text, as the keyboard doesn't popup for passphrase prompt and after opening the keyboard the field is no longer focused so the entered data goes somewhere else.

Cheers